Kobalt.io

Kobalt.io is a cybersecurity and compliance firm that acts as an outsourced security team. It aims to bring the monitoring typically found in large enterprises to smaller organisations. Its team is made up of security professionals and developers.

What Kobalt.io offers

• Compliance programmes — gap assessment through to audit for SOC 2, ISO 27001, HIPAA and ISO 42001.
• GRC platform operation — running tools such as Vanta, Drata and Scrut on the client's behalf.
• Virtual CISO — a senior security leader supplied on a part-time basis.
• Penetration testing and monitoring — security testing plus round-the-clock threat detection.
• Privacy and AI governance — data protection officer support and testing of AI and LLM systems.

Who it works with

Growing companies, from small start-ups to larger scale-ups, that face customer security questionnaires, board pressure or investor diligence. It reports clients in North America, Europe and Asia-Pacific.

Key facts

• Clients: more than 1,600 companies, according to its website
• Frameworks covered: SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, NIST CSF, FedRAMP and others
• Regions: North America, Europe and Asia-Pacific